Lead-Information Security & Data Protection

Job Summary

Lead-Information Security & Data Protection

Location

Bangalore, Karnataka, India

Job Type

Full time

Responsibilities

Regulatory Compliance & Governance

• Act as the designated DPO under Indias DPDP Act 2023 and other applicable privacy laws.
• Maintain a data processing inventory with a documented lawful basis for all activities under the DPDPA Act 2023.
• Support the development and maintenance of privacy policies, data retention schedules, and consent management frameworks.
• Monitor the Privacy by Design and Privacy by Default into the SDLC and data engineering practices.
• Review DPAs, data sharing agreements, and privacy clauses in vendor contracts.

Data Subject Rights & Incident Management

• Manage data subject requests access, correction, erasure, portability, and grievance redressal within regulatory timelines.
• Lead the data breach response: detection, containment, regulatory notification, and post-incident review.

Cyber Security Strategy & Governance

• Establish cybersecurity policies, standards, and guidelines based on industry best practices and regulatory frameworks (ISO 27001).
• Collaborate with HR and the compliance team to build a cybersecurity-aware culture through regular training and education programmes.
• Lead risk assessments to identify potential security threats and vulnerabilities, and propose effective mitigation measures.
• Develop and maintain an incident response programme, managing cybersecurity incidents and data breaches from detection to remediation.

Requirements

• 3+ years of experience in information security, data privacy, or a combined role, preferably in fintech, insurtech, BFSI, or a regulated industry.
• Knowledge of Indias DPDP Act 2023 and hands-on experience implementing data protection programmes.
• Strong working knowledge of ISO 27001.
• Proven experience managing security incidents, data breaches, and regulatory notifications.
• Excellent communication skills able to translate complex security and legal concepts for non-technical stakeholders.
• Technical degree (B.Tech/M.Tech in CS/IT or MBA in Information Security, or related field).

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.